From 1d4100f4861b3945ff3d31d1f830697f26462321 Mon Sep 17 00:00:00 2001 From: Mahangu Weerasinghe Date: Mon, 8 Jun 2026 07:44:56 +0530 Subject: [PATCH] chore: pin third-party GitHub Actions to commit SHAs Tracking: DEVPROD-1072 --- .github/workflows/ci-php.yaml | 4 ++-- .github/workflows/phpcs.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci-php.yaml b/.github/workflows/ci-php.yaml index f6f76d6..356f98b 100644 --- a/.github/workflows/ci-php.yaml +++ b/.github/workflows/ci-php.yaml @@ -46,12 +46,12 @@ jobs: uses: actions/checkout@v6.0.2 - name: Set up PHP - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # 2.37.1 with: php-version: ${{ matrix.php }} - name: Install PHP Dependencies - uses: ramsey/composer-install@3.1.1 + uses: ramsey/composer-install@3cf229dc2919194e9e36783941438d17239e8520 # 3.1.1 - name: Verify MariaDB connection run: | diff --git a/.github/workflows/phpcs.yaml b/.github/workflows/phpcs.yaml index ac3b689..217ec2c 100644 --- a/.github/workflows/phpcs.yaml +++ b/.github/workflows/phpcs.yaml @@ -22,12 +22,12 @@ jobs: uses: actions/checkout@v6.0.2 - name: Set up PHP - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@7c071dfe9dc99bdf297fa79cb49ea005b9fcadbc # 2.37.1 with: php-version: 8.3 - name: Install PHP Dependencies - uses: ramsey/composer-install@3.1.1 + uses: ramsey/composer-install@3cf229dc2919194e9e36783941438d17239e8520 # 3.1.1 - name: Add error matcher run: echo "::add-matcher::$(pwd)/.github/checkstyle-problem-matcher.json"